RHSA-2019:0708HighCVSS 8.8

Red Hat Security Advisory: chromium-browser security update

Published
April 8, 2019
Last Modified
November 12, 2026

🔗 CVE IDs covered (16)

CVE-2019-5791 →CVE-2019-5792 →CVE-2019-5793 →CVE-2019-5797 →CVE-2019-5802 →CVE-2019-5789 →CVE-2019-5794 →CVE-2019-5795 →CVE-2019-5799 →CVE-2019-5800 →CVE-2019-5803 →CVE-2019-5798 →CVE-2019-5787 →CVE-2019-5788 →CVE-2019-5790 →CVE-2019-5796 →

📋 Description

CVE-2019-5787 — chromium-browser: Use after free in Canvas CVE-2019-5788 — chromium-browser: Use after free in FileAPI CVE-2019-5789 — chromium-browser: Use after free in WebMIDI CVE-2019-5790 — chromium-browser: Heap buffer overflow in V8 CVE-2019-5791 — chromium-browser: Type confusion in V8 CVE-2019-5792 — chromium-browser: Integer overflow in PDFium CVE-2019-5793 — chromium-browser: Excessive permissions for private API in Extensions CVE-2019-5794 — chromium-browser: Security UI spoofing CVE-2019-5795 — chromium-browser: Integer overflow in PDFium CVE-2019-5796 — chromium-browser: Race condition in Extensions CVE-2019-5797 — chromium-browser: Race condition in DOMStorage CVE-2019-5798 — chromium-browser: Out of bounds read in Skia CVE-2019-5799 — chromium-browser: CSP bypass with blob URL CVE-2019-5800 — chromium-browser: CSP bypass with blob URL CVE-2019-5802 — chromium-browser: Security UI spoofing CVE-2019-5803 — chromium-browser: CSP bypass with Javascript URLs

🎯 Affected products18

  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • chromium-browser-debuginfo-0:73.0.3683.75-1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect.

🔗 References (19)